linux/arch/arm64/net
Pawan Gupta 0bb99f2cfa bpf: Restrict JIT predictor flush to cBPF
Currently predictor flush on memory reuse is done for all BPF JIT
allocations, but only cBPF programs can be loaded by an unprivileged user.
eBPF is privileged by default, and flushing predictors for all CPUs on
every eBPF reuse penalizes the common case for no security benefit.

eBPF allocations can be frequent on busy systems, only flush predictors
for cBPF programs. Trampoline and dispatcher allocations also skip the
flush as they are eBPF-only.

Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2026-07-01 10:33:38 +02:00
..
bpf_jit_comp.c bpf: Restrict JIT predictor flush to cBPF 2026-07-01 10:33:38 +02:00
bpf_jit.h bpf, arm64: Use ORR-based MOV for general-purpose registers 2026-03-03 08:43:10 -08:00
bpf_timed_may_goto.S bpf, arm64: Map BPF_REG_0 to x8 instead of x7 2026-05-13 09:27:32 -07:00
Makefile bpf, arm64: Add JIT support for timed may_goto 2025-08-27 17:16:22 -07:00